The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3756-1 advisory.

    It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a     malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault     (L1TF). A local attacker in a guest virtual machine could use this to expose sensitive information (memory     from other guests or the host OS). (CVE-2018-3646)

    Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read     may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A     local attacker could use this to expose sensitive information, including kernel memory. (CVE-2018-3639)

    Zdenek Sojka, Rudolf Marek, Alex Zuepke, and Innokentiy Sennovskiy discovered that microprocessors that     perform speculative reads of system registers may allow unauthorized disclosure of system parameters via a     sidechannel attack. This vulnerability is also known as Rogue System Register Read (RSRE). An attacker     could use this to expose sensitive information. (CVE-2018-3640)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Intel Microcode vulnerabilities (USN-3756-1)

medium Nessus Plugin ID 112151

Version 1.12

Version 1.10

Version 1.12 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.10 Oct 21, 2023, 9:06 AM CVSSv2 score source (set to "CVE-2018-3646") Detection Plugin metadata Plugin Feed: 202310210906